CVE-2018-14658

MEDIUM · CVSS 6.1 EPSS 1.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-11-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-14658

Severity

MEDIUM

CVSS

6.1

EPSS

1.10%

Original NVD Description

A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack